IN THE CLAIMS 

1. (original) A method comprising: 

comparing at least a subset of information received from a wired network device with 
information previously stored to determine if a rogue access point is present. 

2. (original) The method of claim 1, wherein comparing at least a subset of information 
received from a wired network device with information previously stored to determine if a rogue 
access point is present comprises: 

comparing at least a subset of information received in a security report from a legitimate 
access point with information previously stored to determine if a rogue access point is present. 

3. (original) The method of claim 1, wherein comparing at least a subset of information 
received from a wired network device with information previously stored to determine if a rogue 
access point is present comprises: 

comparing at least a subset of client network traffic received with information previously 
stored to determine if a rogue access point is present. 

4. (original) The method of claim 1, further comprising: 

initiating countermeasures against rogue access points determined to be present. 

5. (original) The method of claim 4, wherein initiating countermeasures against rogue access 
points determined to be present comprises: 
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denying of service to rogue access points and/or clients connected to rogue access points 
determined to be present. 

6. (original) An electronic appliance, comprising: 

a network interface to receive information; and 

a security engine coupled with the network interface, the security engine to compare at 
least a subset of information received from a wired network device with information previously 
stored to determine if a rogue access point is present. 

7. (original) The electronic appliance of claim 6, wherein the security engine to compare at 
least a subset of information received from a wired network device with information previously 
stored to determine if a rogue access point is present comprises: 

the security engine to compare at least a subset of information received in a security 
report from a legitimate access point with information previously stored to determine if a rogue 
access point is present. 

8. (original) The electronic appliance of claim 6, wherein the security engine to compare at 
least a subset of information received from a wired network device with information previously 
stored to determine if a rogue access point is present comprises: 

the security engine to compare at least a subset of client network traffic received with 
information previously stored to determine if a rogue access point is present. 
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9. (original) The electronic appliance of claim 6, further comprising the security engine to 
initiate countermeasures against rogue access points determined to be present. 

10. (original) The electronic appliance of claim 9, wherein the security engine to initiate 
countermeasures against rogue access points determined to be present comprises: 

the security engine to deny service to rogue access points and/or clients connected to 
rogue access points determined to be present. 

11. (original) A storage medium comprising content which, when executed by an accessing 
machine, causes the machine to implement a security agent in the accessing machine, the 
security agent to compare at least a subset of information received from a wired network device 
with information previously stored to determine if a rogue access point is present. 

12. (original) The storage medium of claim 11, wherein the content to compare at least a subset 
of information received from a wired network device with information previously stored to 
determine if a rogue access point is present comprises content which, when executed by the 
accessing machine, causes the accessing machine to compare at least a subset of information 
received in a security report from a legitimate access point with information previously stored to 
determine if a rogue access point is present. 

13. (original) The storage medium of claim 11, wherein the content to compare at least a subset 
of information received from a wired network device with information previously stored to 
determine if a rogue access point is present comprises content which, when executed by the 
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accessing machine, causes the accessing machine to compare at least a subset of client network 
traffic received with information previously stored to determine if a rogue access point is 
present. 

14. (original) The storage medium of claim 11, further comprising content which, when 
executed by the accessing machine, causes the accessing machine to initiate countermeasures 
against rogue access points determined to be present. 

15. (original) The storage medium of claim 14, wherein the content to initiate countermeasures 
against rogue access points determined to be present comprises content which, when executed by 
the accessing machine, causes the accessing machine to deny service to rogue access points 
and/or clients connected to rogue access points determined to be present. 

16. -19. (canceled). 
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